This is a short commentary on a few overt anonymity gaps in ProtonMail Beta, ver 1.12. These concerns were emailed to ProtonMail Security on January 21, 2015, and they provided a response that is included at the end.
Saturday, January 31, 2015
Anonymity leaks within ProtonMail Beta
This is a short commentary on a few overt anonymity gaps in ProtonMail Beta, ver 1.12. These concerns were emailed to ProtonMail Security on January 21, 2015, and they provided a response that is included at the end.
Labels:
anonymity,
email,
ProtonMail,
research
Monday, January 26, 2015
0daymandias - an original work from #cyberantiquity
0daymandias
by Percy Basshe Shelley
I met a hacker from a proxied land
Who said: "Two vast and trunkless commits of stone
Stand in the desert. Near them on the sand,
Half sunk, a shattered botnet lies, whose spam
And exploit shells and sneer of DNS command
Tell that its coder well those payloads read
Which yet survive, stamped on these XORed things,
The IDS that mocked them and the APT that fed.
And commented out these words appear:
'My name is 0daymandias, king of kings:
Look on my cybers, ye mighty, and despair!'
Nothing pwned remains. Round the decay
Of that colossal takedown, boundless and bare,
The lone and level bits stretch far away.
Wednesday, October 22, 2014
Dear Google: Where's the SSL for Blogger?
I thought enabling HTTPS for this blog would be straightforward, but I painfully found out that a feature I assumed would be a no-brainer is in fact impossible to come by - there's no way to use SSL natively with Blogger. For those of us that want to serve content via end-to-end encryption Blogger is not a solution until Google decides to bring it up to speed with the rest of its services.
Friday, July 4, 2014
When browsers react - Revoked certificates, Heartbleed and you! - News at 11.
tl;dr: Don't forget to reissue your new SSL certificate after you revoke your old one.
I tried to connect to https://kutv.com but Chrome 35 was displeased. Apparently the website's SSL certificate has been revoked, and once that happens ye shall not pass:
Labels:
Heartbleed,
research,
security,
SSL,
web
Monday, April 14, 2014
IPv6 APN means no VPN for the Galaxy S5 on T-Mobile
After starting up F-Secure's Freedome (my nomination for Android app of the year) on my new Samsung Galaxy S5 I noticed that webpages stopped loading. In fact, I seemed to have lost all internet connectivity even though Freedome's notification icon indicated it was connected and the 4G/LTE data icon was present. What gives?
Subscribe to:
Posts (Atom)